VDB
GCVE-110-MAGEIA-2021-172
GCVE-110-MAGEIA-2021-172
Advisory Published
Updated ruby-em-http-request packages fix security vulnerability:
A flaw was found in rubygem-em-http-request. The eventmachine library does
not verify the hostname in a TLS server certificate which can allow an
attacker to perform a man-in-the-middle attack. The highest threat from this
vulnerability is to data confidentiality and integrity (CVE-2020-13482).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | radeon-firmware | 0 (affected), 20210812-1.mga8.nonfree (unaffected) | — |
| Mageia | ruby-em-http-request | 0 (affected), 1.1.7-1.mga7 (unaffected), 0 (affected), 1.1.7-1.mga7 (unaffected) | — |
Aliases
References
Radeon-firmware maintenance release
advisory
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.